Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111658 | low | 3.8 | No | SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController that allows site-scoped administrators t... | 2026-10-23 |
| CVE-2012-20003 | medium | 6.1 | No | Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attacker... | 2026-10-23 |
| CVE-2026-55862 | medium | 6.5 | No | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process... | 2026-10-23 |
| CVE-2026-57486 | high | 7.5 | No | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/src/node.c passes th... | 2026-10-23 |
| CVE-2026-57487 | high | 7.5 | No | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP pa... | 2026-10-23 |
| CVE-2026-112857 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue affects Reprizo: from n/a... | 2026-10-23 |
| CVE-2026-112853 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue affects Hallelujah:... | 2026-10-23 |
| CVE-2026-112849 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes Hostme v2 hostmev2 allows... | 2026-10-23 |
| CVE-2026-112862 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This i... | 2026-10-23 |
| CVE-2026-112860 | critical | 9.3 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database p... | 2026-10-23 |
| CVE-2026-112838 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows... | 2026-10-23 |
| CVE-2026-112837 | high | 8.5 | No | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allow... | 2026-10-23 |
| CVE-2026-112835 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows... | 2026-10-23 |
| CVE-2026-112825 | medium | 6.5 | No | Missing Authorization vulnerability in Magepeople inc. Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access... | 2026-10-23 |
| CVE-2026-112821 | medium | 6.5 | No | Missing Authorization vulnerability in Knit Pay Knit Pay knit-pay allows Exploiting Incorrectly Configured Access Control Security Levels.Th... | 2026-10-23 |
| CVE-2026-112359 | high | 7.5 | No | Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configured Access Control Security Le... | 2026-10-23 |
| CVE-2026-102917 | high | 7.8 | No | IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerabil... | 2026-10-23 |
| CVE-2026-107674 | medium | 4.4 | No | IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications att... | 2026-10-23 |
| CVE-2026-17068 | low | 3.3 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export versi... | 2026-10-23 |
| CVE-2026-17073 | medium | 5.5 | No | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle r... | 2026-10-23 |